Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          JgRfHf77E/B6elLnHrUus1/MvGPJFwrDllffqTotBRU=
Subject key identifier:   7D:CB:C8:52:75:48:67:B6:75:AF:72:F6:EC:4C:32:64:DC:D0:76:80
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       01935274FDF4DE9F2EFDE3210C9ADF60BBD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          0103
Signing time:             Fri 22 Nov 2024 06:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:19 +0000
Files and hashes:         1: 4RWWHewCk17ZYkTOEahcX_Z7BXQ.roa (hash: S2YE5eb2ljJtKsv7bib6x7ggzBEmo9THuWqk2B9DjIU=)
                          2: 7EiakR7IvzJmFBcHIpWN_qrbwOk.roa (hash: FgVWGaJxeAZOC6gguPIGm7BoE0ELhFeHgQKBCUP3wCE=)
                          3: HDSPYQAsun6TXFlpwZ7Kak9QQCQ.roa (hash: xenlCneBBaJpvMR7nqwTV0Mq5zxXgB28VzjlKkHsKiQ=)
                          4: HLR-fOPDFUviNISkoimXAQ654cE.roa (hash: U05btgtoG6dZl0Miy3fGG6xmv9IJnzEWAjDR3vpcEvE=)
                          5: M-YqfjUNaUyLBL4UbxspCBQNkCk.roa (hash: tKWKFYnhoTKOUFiIgNRgYoam4/+WWBZhunuD/h+yK/U=)
                          6: Mics_0JlWFs1bw-ioqyHwdh8CW0.roa (hash: ww+YY8Bl6Hdo5VvDwq+jRGUx4OXtW+st2P3kNXqZzpA=)
                          7: O1yXhkpsije07ZP5ZhjzRHfJCjU.roa (hash: UG6xuX/jYlaDXjO+cE1mcSoyNdjGtwXnmSStRG2o0mA=)
                          8: Orj_NxXuKVJJKGB3782FP3hj-24.roa (hash: ez1RPk9ObFkR9w3Ef+7JyTJ40N87w84dJ6FoTKwCGyE=)
                          9: PYN6P17szd0mSRyOJmP8qyg6tVE.roa (hash: N8ROZ4/F3M0e0MNWQ/P5XciviWKxi3iBui5kari0Tow=)
                          10: Q3vu4yIjP5tQ3ZkveuaKxh52yEQ.roa (hash: XOIGj5FrrgEKXz5Gx3Wu1STcVdiwcmi5aOQb5MHsVEw=)
                          11: TBpBK5F7CdIX4NAU5malqN2yZHA.roa (hash: DTOis8P06OROqD70enBRgEvu+oKT5EJKXl7kbmDOobU=)
                          12: U1KvqR2zqyPHyuzrug6d4D9g5wc.roa (hash: 4qu3QSJLf+fvEcd4K0H9b9seXXYSQLS3t1U6rBDqRzI=)
                          13: YJbSI7nFTtFH5KLHvtbSRARLtY8.roa (hash: t0B1JfzA7Y0qknLMFlefU1csweaK2D7RQS7edYPJgGM=)
                          14: ZVVvUV6DICCnrxJTuwTMJr-62qw.roa (hash: XtqbI+7l1FLAp6wmS4Eb0at2O+122yfrRrYn5XtTDbg=)
                          15: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: ZmCqcl7NwBzVmH3ZnNcAqEQRG9xQRSzSErcCfxdln9o=)
                          16: ciz_VJshb0KDiOTpuzHACoOUhBk.roa (hash: G6ByIiM8WTiM2DrQereUB0S/Y7R94GcwLLsCJf59Gug=)
                          17: iMb5uQ20k4EGQUwn9NTULi4N6I0.roa (hash: /vO6AR8oDauypN3+9OZGuD4g+LHst6eo9f+3uXPAY3E=)
                          18: tB1BxI1MyRn5wzngYBVCKQdMg_E.roa (hash: Rl7nD+fPp5LcHOFmWVJKt3yddCRUcFITzdk9QIwMVgU=)
                          19: yKulhFqe-uYbvM1e18F_9FiqXWY.roa (hash: Q4/Cw4tpkHN/4+5GLUbyRe2b5Rj65N9BN79so0mhhQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:fd:f4:de:9f:2e:fd:e3:21:0c:9a:df:60:bb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Nov 22 06:00:19 2024 GMT
            Not After : Nov 23 06:00:19 2024 GMT
        Subject: CN=7dcbc852754867b675af72f6ec4c3264dcd07680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:da:2d:09:4b:d2:5d:a8:96:bf:df:8f:0a:
                    49:3c:b2:c4:2b:b4:ea:bc:9a:57:35:80:a7:4a:8e:
                    5e:d8:cc:32:33:9b:c0:55:51:53:28:8f:29:58:89:
                    58:6c:9b:a6:4f:74:bb:8e:06:d3:d8:73:a5:17:99:
                    be:72:65:09:4d:06:42:7a:69:05:9b:25:14:b5:09:
                    5e:a1:b0:bc:cc:35:ff:02:18:26:f3:ba:de:d5:6e:
                    bb:f1:5c:68:d0:c0:7e:1a:60:2d:39:da:73:69:9e:
                    ad:ab:b0:f5:46:b5:52:9b:e6:00:db:d3:27:e6:19:
                    5e:a9:72:4b:02:d2:29:05:6b:35:5d:ca:2e:f8:02:
                    23:c4:c7:52:12:a1:2c:a4:b3:5b:1a:a0:34:af:e5:
                    8f:2a:ba:da:d0:01:82:41:bc:5f:fd:ba:d6:2e:27:
                    3e:0d:10:c9:56:27:cf:34:16:85:54:f5:f1:30:10:
                    db:4e:ed:ed:9d:0d:8f:8e:42:e1:60:c9:c5:e3:fe:
                    a2:bf:76:c2:c1:1f:49:6e:49:34:67:d0:a2:b7:62:
                    3a:8d:d1:f3:c2:32:99:4f:64:b2:7d:d7:66:0e:5b:
                    48:bb:14:28:80:ed:41:02:57:5d:0a:e7:4c:37:61:
                    ba:24:d9:28:a8:39:e0:a9:64:01:f4:f3:3f:54:eb:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:C8:52:75:48:67:B6:75:AF:72:F6:EC:4C:32:64:DC:D0:76:80
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:5d:1d:d3:86:9b:ca:d4:b1:44:dd:77:d9:a2:05:62:aa:
         3c:00:52:bc:43:43:90:d5:b9:e2:21:7f:54:9c:c3:23:30:fc:
         1e:9a:8b:10:9b:6e:89:af:d2:71:fe:74:f4:c9:0f:a1:28:a5:
         4c:83:d0:57:61:9b:81:ec:5c:82:9d:d6:93:45:bc:2f:24:81:
         d4:92:5b:d3:9f:0d:bb:88:cd:a5:84:c0:28:93:fd:75:6f:d5:
         51:45:70:0a:37:f8:3f:7f:6a:34:85:0e:a8:dc:95:d6:5d:5c:
         26:15:bb:40:42:3b:43:13:97:54:72:4b:95:dd:ef:27:1a:3f:
         30:c1:74:dd:01:30:07:8d:c6:65:cf:74:74:f8:eb:b0:59:02:
         2d:f5:f3:84:ef:c4:18:aa:b0:1c:0d:5d:9f:ed:62:55:d8:f9:
         71:df:b1:5b:fa:a5:09:28:38:a1:0a:be:f6:e4:10:ba:94:68:
         ce:95:06:12:08:25:32:fb:71:9f:1e:8a:ca:b6:ba:3e:50:57:
         6a:ea:ae:5a:22:a0:4d:83:3e:11:c7:2a:46:99:d8:d0:e8:58:
         7a:37:7b:81:9a:8e:19:d4:06:65:b9:21:89:84:82:29:97:1e:
         c3:96:31:b4:45:e0:0d:a3:72:81:cc:2e:eb:69:26:dd:ea:b0:
         5a:41:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:15 2024 by rpki-client on console-fra.rpki-client.org